CVE-2019-7564

An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn't require any type of authentication. By making a POST request to the regx/wireless/wlsecurity2G.asp URI, the attacker can change the password of the Wi-FI...

CVE-2019-7564: Missing Authentication for Critical Function

An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn't require any type of authentication. By making a POST request to the regx/wireless/wlsecurity2G.asp URI, the attacker can change the password of the Wi-FI...

PT-2019-18648

Name of the Vulnerable Software and Affected Versions Shenzhen Coship WM3300 WiFi Router version 5.0.0.55 Description An issue was found where the password reset functionality of the Wireless SSID does not require authentication. This allows an attacker to change the WiFi network password by maki...